Lead Software Engineer - SDLC Tooling (GitLab/DevSecOps)

Location: Buffalo, New York, United States of America

Salary: $116,400–$194,000 annual (USD)

Company

M&T Bank operates an enterprise technology environment supporting secure software delivery and engineering platforms.

What you will do

• Design, engineer, administer, and improve enterprise developer experience and SDLC platforms.
• Own and evolve GitLab SCM, CI/CD, runners, Duo, governance controls, SonarQube, JFrog Artifactory, Mend, IDE tooling, developer portals, and DevSecOps capabilities.
• Build reusable CI/CD templates, pipeline standards, deployment frameworks, release automation, and self-service engineering capabilities.
• Integrate developer platforms with cloud services, identity systems, workstations, ticketing systems, and observability platforms.
• Define standards for source control, branching, code review, testing, release management, and software supply chain security.
• Lead modernization initiatives, measure platform adoption and reliability, present technical recommendations, and coach engineering teams.

Requirements

• Associate’s degree and at least 7 years of systems analysis or application development experience, or bachelor’s degree and at least 5 years of relevant experience.
• Without a degree, at least 9 years of combined education and relevant experience, including 5 years of systems analysis or application development experience.
• Expert experience with GitLab, SonarQube, Artifactory, Mend, CI/CD platforms, or related SDLC technologies.
• Experience building and supporting large-scale enterprise software delivery environments, automation, platform integrations, APIs, and engineering enablement solutions.
• Experience with secure software development and DevSecOps practices.
• Work location: Buffalo, New York, United States of America.

Nice to have

• Expert knowledge of GitLab Enterprise, including SCM, CI/CD, Duo, runners, governance, and administration.
• Experience with internal developer platforms, software supply chain security, dependency management, SBOMs, vulnerability remediation, and release automation.
• Experience with cloud-native platforms, platform engineering, DORA metrics, and developer productivity measurement.
• Experience leading complex modernization initiatives and partnering with Architecture, Cybersecurity, Infrastructure, Cloud Engineering, Risk, and Application Development teams.

Culture & Benefits

• Technical leadership and influence across multiple engineering organizations without direct supervisory responsibility.
• Mentorship, technical coaching, and guidance for engineers, platform teams, and stakeholders.
• Work governed by enterprise risk, regulatory, audit, security, and internal control standards.
• Commitment to belonging and the organization’s values.